Overview
UC Business and Finance Bulletin IS-3 is the University of California’s systemwide information security policy. The policy and related standards are available on the UC Systemwide Information Security website.
IS-3 establishes how information security risk is handled within the university. Foundational elements include:
- Security is a shared responsibility - everyone has a role.
- IS-3 focuses on risk management; risk assessment is key.
- Units are responsible for managing their own risk.
- Many requirements are based on Protection Level and Availability Level classification.
The "UC Berkeley's Implementation of IS-3" webpage describes the campus implementation of this systemwide policy.